Back
CVE-2007-5247
Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and…
High9.3EPSS 5.2%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 5.2% · top 7.6% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.
Weakness
Affected products
n/a
- affected n/a
References (7)
- 45530 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- http://aluigi.altervista.org/adv/fearfspb-adv.txt (opens in a new tab)x_refsource_MISCx_transferred
- http://aluigi.org/poc/fearfspb.zip (opens in a new tab)x_refsource_MISCx_transferred
- 20071001 Format string in F.E.A.R. 1.08 through PB (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 3197 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
- 45531 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- fear-punkbuster-format-string(36900) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2007-5247)Record last updated .